General
- Target DuckInstaller.exe
- Size 9.0MB
- Sample260603-zpvbfaft8m
- SHA256 385ba6ebc239d76e5617be4d57c0e46cbed21a6f0dfd615d1d580793e17f9d9d
Score
8/10
Malware Config
Targets
-
- Target DuckInstaller.exe
- Size 9.0MB
- SHA256 385ba6ebc239d76e5617be4d57c0e46cbed21a6f0dfd615d1d580793e17f9d9d
Score8/10Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
Prevents Microsoft Defender from scanning certain paths by adding an exclusion.
Uses the Powershell Add-MpPreference cmdlet to exclude paths from being scanned by Microsoft Defender.
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.